Classroom Glossary Public page

Lab Pack 4: CVE-2025-65106 End-to-End Reproduction (Week 4)

Reproduce CVE-2025-65106 end-to-end on a pinned vulnerable LangChain install. The signature lab of the course.

What you ship

  • A clean Python virtualenv with the vulnerable LangChain pinned in requirements.txt.
  • A reproduction harness (a Python script or notebook) that runs the chain and shows the SSTI firing.
  • Observed output captured to a text file in your repo.
  • A short README naming the CVE identifier, the affected versions, and the patched version.
  • Toolchain Diary entries for the pinned-virtualenv discipline.

Tools you use

  • Python 3.11+, venv, the pinned vulnerable LangChain.
  • The cohort-shared reproduction harness scaffolding from labs/lab-4/.
  • Optional: a live OpenAI or Anthropic SDK key.

Success criteria

  • The SSTI fires on the pinned vulnerable install.
  • The reproduction is reproducible from your requirements.txt alone.
  • Your README cites the CVE identifier and the patched version.

Time budget

Plan for two ninety-minute lab sessions plus two hours of independent build-out. Modules 4 and 6 commonly run over; budget one extra session for those.

Submission

Push to your student repo under adv-102/labs/lab-4/. Include source, a one-paragraph README, the output you observed, and where applicable a structured detector or trace file.